Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uK0AcS5GDXuf02wX3zxypcYQjws.roa
File: uK0AcS5GDXuf02wX3zxypcYQjws.roa (raw, json)
Hash identifier: WXgmyLw+KcNnuK+G6qZ3hX7Q/lGkysPZ9IlI392rWQU=
Subject key identifier: B8:AD:00:71:2E:46:0D:7B:9F:D3:6C:17:DF:3C:72:A5:C6:10:8F:0B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018793DB17359C6544A1CF0179A792EC44C5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uK0AcS5GDXuf02wX3zxypcYQjws.roa
Signing time: Tue 18 Apr 2023 10:13:41 +0000
ROA not before: Tue 18 Apr 2023 10:13:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:93:db:17:35:9c:65:44:a1:cf:01:79:a7:92:ec:44:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 18 10:13:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b8ad00712e460d7b9fd36c17df3c72a5c6108f0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7f:50:6c:84:82:44:00:4d:4b:9f:6f:30:bc:
cf:ba:79:0a:6a:64:ad:57:e6:6d:ca:f3:3c:01:36:
47:91:c5:a3:dc:3f:1b:24:ce:d2:16:13:59:e9:da:
0a:a2:9f:e8:ad:4d:14:1a:56:11:0d:17:83:6b:7f:
18:d0:77:09:11:f8:ff:44:2f:77:d3:2e:37:0d:c4:
69:e8:b8:42:ba:f2:22:ce:52:9f:67:df:8f:8a:a2:
e6:52:77:0a:31:6a:b7:44:1f:c9:31:d3:6b:e1:c7:
39:27:48:3f:1d:49:de:91:4d:c5:5e:61:18:bd:f1:
d9:61:cf:42:a7:ec:93:40:95:6e:2d:a6:19:46:be:
38:25:88:c2:78:c0:e4:c5:c6:37:35:32:14:9f:e6:
e4:64:ce:84:b6:3b:1a:86:b1:be:43:9d:2e:56:41:
13:9f:a5:fc:85:ab:04:a9:ce:bd:73:71:93:d2:f0:
2c:88:77:e9:ae:af:ee:5e:69:04:57:97:98:85:cc:
29:3b:47:9c:53:17:a9:f4:bb:e1:b9:6e:09:a5:35:
be:85:02:23:d0:a2:9d:f2:d2:ee:be:64:81:09:61:
96:b5:14:7c:5b:1a:a6:a9:7e:96:27:36:24:bd:cc:
66:ed:5e:5c:d7:c5:bd:e2:f7:65:69:48:b8:b9:56:
62:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:AD:00:71:2E:46:0D:7B:9F:D3:6C:17:DF:3C:72:A5:C6:10:8F:0B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uK0AcS5GDXuf02wX3zxypcYQjws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
19:59:05:0b:b9:a8:1d:37:e2:4e:36:86:a2:5e:13:5a:85:04:
53:5f:37:ac:0a:7c:b3:76:76:9b:fd:df:a9:b5:ea:09:b8:b6:
0d:18:40:83:d9:12:fa:9e:20:15:0d:e7:7c:80:ac:1c:64:8c:
77:e1:ef:76:8e:25:98:75:ed:36:a2:bd:1c:37:92:11:8f:17:
b9:b2:2e:b1:36:ab:24:5d:aa:f8:97:b0:ae:92:f8:cb:dc:6d:
b3:e2:1e:d9:b9:73:83:3e:07:80:cb:ab:7e:da:50:14:a4:3b:
bf:f8:be:a3:46:48:7b:09:4b:ca:cb:76:d1:7c:0e:5f:c4:e0:
6d:b9:b6:eb:9a:d0:79:2c:5b:55:1e:1c:e8:04:f4:35:57:59:
e7:5f:b9:eb:10:f9:60:64:49:13:68:61:f9:39:02:03:f2:2c:
68:28:35:49:43:0e:9d:1f:27:7c:68:35:4b:50:62:cd:09:ec:
02:79:c1:09:30:68:c7:9a:cc:c3:82:65:62:fe:b9:ab:1e:e2:
48:67:67:36:7b:b9:13:6f:98:ba:be:7c:d6:35:66:64:e2:45:
5b:f5:b2:f4:22:58:49:64:f2:9e:8b:63:39:c7:f6:46:b5:f8:
7a:07:23:d6:2c:94:28:b0:cc:f7:ef:d4:2a:af:d3:a6:50:bd:
be:f6:2c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 05:41:10 2025 by rpki-client